06-07-2024, 12:14 PM
Today I'm selling an Italian ISP access to their database from an SQL Injection.
Details:
- Databases count: 20
List:
(some are censored to avoid the victim to understand that they're vulnerable)
- clienti
- information_schema
- n2q_gest
- [redacted]
- [redacted]_clienti
- [redacted]_clienti_solopec
- [redacted]_dev1
- [redacted]_dns
- [redacted]_gest
- [redacted]_ipplan
- [redacted]_ldap
- [redacted]_monitor
- [redacted]_phpmyadmin
- [redacted]_policyd
- [redacted]_policyd2
- [redacted]_postfix
- [redacted]_roundcube
- [redacted]_roundcube_wisp
- [redacted]_webcam
- [redacted]
Seems the DB used is the main DB used by the entire ISP.
INCOME ~1.550.00,00 €
Price 5k-10k (negotiable) will also give more details on how to exploit and all the needed info.
Of course I only use the escrow.
Details:
- Databases count: 20
List:
(some are censored to avoid the victim to understand that they're vulnerable)
- clienti
- information_schema
- n2q_gest
- [redacted]
- [redacted]_clienti
- [redacted]_clienti_solopec
- [redacted]_dev1
- [redacted]_dns
- [redacted]_gest
- [redacted]_ipplan
- [redacted]_ldap
- [redacted]_monitor
- [redacted]_phpmyadmin
- [redacted]_policyd
- [redacted]_policyd2
- [redacted]_postfix
- [redacted]_roundcube
- [redacted]_roundcube_wisp
- [redacted]_webcam
- [redacted]
Seems the DB used is the main DB used by the entire ISP.
INCOME ~1.550.00,00 €
Price 5k-10k (negotiable) will also give more details on how to exploit and all the needed info.
Of course I only use the escrow.